dsh-tui-theme 0.3.1 → 0.4.0

package/lib/types/index.js

@@ -4,8 +4,8 @@
  * 个性化全部走既有接缝，不注册快捷键、不注册命令、不拦截任何输入：
  * - 接缝四（主题）：内置三套粉色 JSON（pink-night / pink-day / pink-ansi），
  *   启动时复制进 ~/.dsh-tui/themes/（仅缺失时，绝不覆盖用户已有文件）；
- * - 自动跟随：检测终端/系统背景色（OSC 11，与宿主同阈值），在昼樱/夜樱
- *   间自动切换——pink 版的 auto；
+ * - 缓存背景跟随：安全应用已有的终端背景缓存，在昼樱/夜樱间切换；
+ *   dsh-TUI 未提供插件终端查询接缝时，不直接读写 stdin、raw mode 或 OSC 11；
  * - 接缝十一（状态行）：输入框上方一行小装饰（✿ · 时钟 · 本轮轮数）；
  * - 接缝六（设置区块）：/settings 里一个可编辑面板，即时生效。
  *
@@ -81,17 +81,14 @@ export function apply(ctx, config = {}) {
     // The /settings user layer (settings.yaml) overrides the cordis layer and
     // lands live through scope.watch; both override the hardcoded defaults.
     let effective = cordis;
-    // Background follow honors the MERGED knob (cordis layer overlaid by the
-    // /settings user layer), so the decision cannot be taken synchronously at
-    // apply(): the user layer is only readable once the settings service
-    // answers. The settings callback still fires before the host's React tree
-    // mounts (the host gates its own mount on the same service, probed
-    // against 0.9.0), so the pref write decides this boot exactly like a sync
-    // write would, and toggling followSystem in /settings re-decides live.
+    // Background follow applies only an existing cache. dsh-TUI v0.9.2 exposes
+    // no plugin terminal-query seam, so a theme plugin must not compete with
+    // Ink's stdin reader or raw-mode lease. The /settings layer still determines
+    // whether the cached result may control this startup.
     let followActive;
     const dataDir = join(homeDir(), '.dsh-tui');
-    const startFollow = () => {
-        runFollowSystem(dataDir, message => {
+    const applyFollow = () => {
+        runFollowSystem(dataDir, () => followActive === true, message => {
             ctx.logger.info(`dsh-tui-theme: ${message}`);
         });
     };
@@ -100,23 +97,16 @@ export function apply(ctx, config = {}) {
         if (effective.followSystem !== followActive) {
             followActive = effective.followSystem;
             if (followActive) {
-                startFollow();
+                applyFollow();
             }
             else {
                 ctx.logger.info('dsh-tui-theme: follow: disabled, manual /theme choice preserved');
             }
         }
     });
-    // Degradation backstop for hosts that never provide a settings service:
-    // the inject callback never fires there, so the cordis-layer decision
-    // applies instead. The delay lets any pending service registration (and
-    // its callback) land first — it no-ops once followActive is settled, and
-    // stays inside the host's own 300ms pre-mount settings gate either way.
-    setTimeout(() => {
-        if (followActive === undefined && cordis.followSystem) {
-            followActive = true;
-            startFollow();
-        }
-    }, FOLLOW_FALLBACK_MS);
+    // Cached following needs the merged settings document; without the settings
+    // seam the plugin keeps the user's existing theme choice and degrades to
+    // static assets rather than applying a profile default before that document
+    // could arrive.
     startStatusLine(ctx, () => effective);
 }

package/lib/types/settingsSection.d.ts

@@ -20,7 +20,7 @@ import type { StatusOptions } from './statusLine.js';
 export type PinkSettingsDoc = StatusOptions & {
     /** Install bundled theme JSONs on boot (cordis-config layer only). */
     autoInstallThemes?: boolean;
-    /** Follow the terminal/system background: pink-day ↔ pink-night. */
+    /** Apply a cached terminal background: pink-day <-> pink-night. */
     followSystem?: boolean;
 };
 /**

package/lib/types/settingsSection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settingsSection.d.ts","sourceRoot":"","sources":["../../src/settingsSection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD,+EAA+E;AAC/E,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG;IAC5C,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,oEAAoE;IACpE,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB,CAAA;AAcD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,GACpC,IAAI,CA4CN"}
+{"version":3,"file":"settingsSection.d.ts","sourceRoot":"","sources":["../../src/settingsSection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD,+EAA+E;AAC/E,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG;IAC5C,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,mEAAmE;IACnE,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB,CAAA;AAcD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,IAAI,GACpC,IAAI,CAoDN"}

package/lib/types/settingsSection.js

@@ -30,29 +30,36 @@ import z from '@deepseek-ai/schemastery';
 export function registerPinkSettings(ctx, cordis, onDoc) {
     ctx.inject(['settings'], settingsCtx => {
         const settings = settingsCtx.settings;
-        const scope = settings.register(settingsNamespace('dsh-tui-theme'), z.object({
-            followSystem: z.boolean(),
-            showGlyph: z.boolean(),
-            showClock: z.boolean(),
-            showTurns: z.boolean(),
-            statusScope: z.union(['pink-only', 'all-themes']),
-        }));
-        const emit = (doc) => {
-            if (doc === null || typeof doc !== 'object')
-                return;
-            const clean = {};
-            for (const [key, value] of Object.entries(doc)) {
-                if (value !== undefined)
-                    clean[key] = value;
-            }
-            onDoc(clean);
-        };
-        // Own the watcher on the inject-scoped ledger so it survives exactly as
-        // long as this activation (scope.watch's disposer is otherwise leaked).
-        settingsCtx.effect(() => {
-            emit(scope.get());
-            return scope.watch(emit);
-        });
+        try {
+            const scope = settings.register(settingsNamespace('dsh-tui-theme'), z.object({
+                followSystem: z.boolean(),
+                showGlyph: z.boolean(),
+                showClock: z.boolean(),
+                showTurns: z.boolean(),
+                statusScope: z.union(['pink-only', 'all-themes']),
+            }));
+            const emit = (doc) => {
+                if (doc === null || typeof doc !== 'object')
+                    return;
+                const clean = {};
+                for (const [key, value] of Object.entries(doc)) {
+                    if (value !== undefined)
+                        clean[key] = value;
+                }
+                onDoc(clean);
+            };
+            // Own the watcher on the inject-scoped ledger so it survives exactly as
+            // long as this activation (scope.watch's disposer is otherwise leaked).
+            settingsCtx.effect(() => {
+                emit(scope.get());
+                return scope.watch(emit);
+            });
+        }
+        catch (error) {
+            // A duplicate registration (hot reload race) or a stricter host must
+            // not take the plugin — or the TUI — down.
+            settingsCtx.logger.warn(`dsh-tui-pink-theme: settings namespace registration failed: ${String(error)}`);
+        }
     });
     ctx.inject(['tuiSettingsSections'], sectionsCtx => {
         const sections = sectionsCtx
@@ -77,11 +84,11 @@ function sectionDefinition(cordis) {
         fields: [
             {
                 path: ['followSystem'],
-                label: 'Follow terminal background',
-                descriptions: { zh: '跟随终端背景' },
-                hint: 'Auto-switch between Pink Day and Pink Night by terminal/system background. First enabling or a background flip applies from the next boot.',
+                label: 'Use cached terminal background',
+                descriptions: { zh: '使用已缓存的终端背景' },
+                hint: 'Apply a previously saved terminal background result at startup. dsh-TUI 0.9.2 does not expose a safe plugin query, so this plugin does not refresh the cache.',
                 hintDescriptions: {
-                    zh: '按终端/系统背景色在昼樱与夜樱间自动切换。首次开启或背景刚翻转后，自下次启动生效。',
+                    zh: '启动时应用此前保存的终端背景结果。dsh-TUI 0.9.2 未提供安全的插件查询接缝，因此本插件不会刷新该缓存。',
                 },
                 kind: 'boolean',
                 format: (value) => String(value ?? cordis.followSystem),

package/lib/types/statusLine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"statusLine.d.ts","sourceRoot":"","sources":["../../src/statusLine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAOlD,mDAAmD;AACnD,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,YAAY,CAAA;AAEpD,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,sCAAsC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,iEAAiE;IACjE,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED,mCAAmC;AACnC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAA;AAwCrD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,GAAG,IAAI,CA2DvF"}
+{"version":3,"file":"statusLine.d.ts","sourceRoot":"","sources":["../../src/statusLine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAOlD,mDAAmD;AACnD,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,YAAY,CAAA;AAEpD,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,sCAAsC;IACtC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,iEAAiE;IACjE,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED,mCAAmC;AACnC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAA;AAwCrD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,GAAG,IAAI,CA8DvF"}

package/lib/types/statusLine.js

@@ -61,6 +61,7 @@ export function startStatusLine(ctx, getEffective) {
         const turns = new Map();
         let current;
         let dispose;
+        let lastText;
         const render = () => {
             try {
                 const eff = getEffective();
@@ -79,6 +80,9 @@ export function startStatusLine(ctx, getEffective) {
                     }
                 }
                 const text = parts.join(' · ');
+                if (text === lastText)
+                    return;
+                lastText = text;
                 // The trailing identity must be the inject-scoped context (the same
                 // activation the traceable binds as caller) — the plugin's outer ctx
                 // is a different activation view and would be silently rejected.
@@ -88,14 +92,14 @@ export function startStatusLine(ctx, getEffective) {
                 // Display garnish only: a rendering hiccup must never travel upward.
             }
         };
-        ctx.on('session/event', (session, event) => {
+        statusCtx.on('session/event', (session, event) => {
             current = session;
             if (event?.type === 'turn/end') {
                 turns.set(session, (turns.get(session) ?? 0) + 1);
             }
             render();
         });
-        ctx.on('session/disposed', session => {
+        statusCtx.on('session/disposed', session => {
             turns.delete(session);
             if (current === session)
                 current = undefined;

package/lib/types/themeAssets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"themeAssets.d.ts","sourceRoot":"","sources":["../../src/themeAssets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAID,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,2DAA2D;AAC3D,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,GAAE,MAA0B,EACrC,SAAS,GAAE,MAA2B,GACrC,kBAAkB,CA2BpB"}
+{"version":3,"file":"themeAssets.d.ts","sourceRoot":"","sources":["../../src/themeAssets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAID,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,2DAA2D;AAC3D,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,GAAE,MAA0B,EACrC,SAAS,GAAE,MAA2B,GACrC,kBAAkB,CA+BpB"}

package/lib/types/themeAssets.js

@@ -7,7 +7,7 @@
  * theme garnish must never break the TUI's boot.
  * @module dsh-tui-pink-theme/themeAssets
  */
-import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { mkdirSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -42,17 +42,23 @@ export function installBundledThemes(targetDir = themesTargetDir(), sourceDir =
         return { installed, skipped, failed: [sourceDir] };
     }
     for (const file of files) {
+        const target = join(targetDir, file);
         try {
-            const target = join(targetDir, file);
-            if (existsSync(target)) {
-                skipped.push(file);
-                continue;
-            }
             const text = readFileSync(join(sourceDir, file), 'utf8');
             JSON.parse(text); // our own asset, but never write a corrupt file out
             mkdirSync(targetDir, { recursive: true });
-            writeFileSync(target, text);
-            installed.push(file);
+            try {
+                writeFileSync(target, text, { flag: 'wx' });
+                installed.push(file);
+            }
+            catch (error) {
+                if (error.code === 'EEXIST') {
+                    skipped.push(file);
+                }
+                else {
+                    failed.push(file);
+                }
+            }
         }
         catch {
             failed.push(file);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-tui-theme",
-  "version": "0.3.1",
-  "description": "Sakura-pink themes for dsh-TUI with terminal-background auto-follow (pink-day/pink-night), a blossom status line, and a /settings section. No shortcuts, no commands.",
+  "version": "0.4.0",
+  "description": "Sakura-pink themes for dsh-TUI with optional cached background follow (pink-day/pink-night), a blossom status line, and a /settings section. No shortcuts, no commands.",
   "type": "module",
   "main": "lib/types/index.js",
   "types": "lib/types/index.d.ts",
@@ -17,6 +17,7 @@
     "lib",
     "themes",
     "docs",
+    "scripts",
     "cordis.patch.yml"
   ],
   "engines": {
@@ -24,7 +25,11 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
-    "verify": "node scripts/verify.mjs"
+    "verify": "node scripts/verify.mjs",
+    "verify:package": "node scripts/verify-package.mjs",
+    "verify:host": "node scripts/headless-order-test.mjs && node --import tsx/esm scripts/validate-themes-against-host.mjs",
+    "release:check": "npm run build && npm run verify && npm run verify:package",
+    "prepack": "npm run release:check"
   },
   "license": "MIT",
   "author": "xiaoxiaohaigui",
@@ -50,19 +55,19 @@
       "patch": "./cordis.patch.yml"
     }
   },
-  "dependencies": {
-    "@deepseek-ai/schemastery": "^3.18.1"
-  },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-rc.1"
+    "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.1"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
     "@deepseek-ai/dsh-session": "^0.1.0-rc.6 || ^0.1.1-rc.1",
     "@deepseek-ai/dsh-settings": "^0.1.0-rc.6 || ^0.1.1-rc.1",
+    "@deepseek-ai/schemastery": "^3.18.1",
     "@types/node": "^22.0.0",
+    "tsx": "^4.23.12",
     "typescript": "^6.0.3"
   }
 }

package/scripts/headless-order-test.mjs

@@ -0,0 +1,67 @@
+/**
+ * End-to-end order test with the installed dsh-TUI services. Composes this
+ * plugin before the extension services to exercise late service injection.
+ *
+ * DSH_TUI_ADAPTER_DIR must point at dsh-TUI's lib/types/dsh-adapter directory.
+ */
+import { existsSync, mkdtempSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import { createRequire } from 'node:module'
+import assert from 'node:assert/strict'
+
+const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
+const adapter = process.env.DSH_TUI_ADAPTER_DIR
+if (adapter === undefined || adapter === '') {
+  throw new Error('DSH_TUI_ADAPTER_DIR must point at dsh-TUI lib/types/dsh-adapter for this host integration test.')
+}
+
+if (!existsSync(join(adapter, 'extensions.js'))) {
+  throw new Error(`dsh-TUI adapter not found at ${adapter}`)
+}
+
+const hostPackagePath = join(adapter, '..', '..', '..', 'package.json')
+if (!existsSync(hostPackagePath)) {
+  throw new Error(`dsh-TUI package metadata not found above adapter at ${adapter}`)
+}
+const hostPackage = JSON.parse(readFileSync(hostPackagePath, 'utf8'))
+assert.equal(hostPackage.version, '0.9.2', `expected dsh-TUI adapter 0.9.2, received ${hostPackage.version}`)
+
+const sandbox = mkdtempSync(join(tmpdir(), 'pink-order-'))
+process.env.USERPROFILE = sandbox
+process.env.HOME = sandbox
+
+const dataDir = join(sandbox, '.dsh-tui')
+mkdirSync(dataDir, { recursive: true })
+writeFileSync(join(dataDir, 'theme.json'), JSON.stringify({ theme: 'pink-night' }, null, 2))
+
+const req = createRequire(join(adapter, 'extensions.js'))
+const { Context } = await import(pathToFileURL(req.resolve('@deepseek-ai/cordis')).href)
+const extensions = await import(pathToFileURL(join(adapter, 'extensions.js')).href)
+const ledgerModule = await import(pathToFileURL(join(adapter, 'effect-ledger.js')).href)
+const statusModule = await import(pathToFileURL(join(adapter, 'status.js')).href)
+const pink = await import(pathToFileURL(join(pluginRoot, 'lib', 'types', 'index.js')).href)
+
+const app = new Context()
+await app.plugin(ledgerModule.default)
+await app.plugin(pink)
+await app.plugin(extensions.default ?? extensions)
+await new Promise(resolve => setTimeout(resolve, 300))
+
+const ledger = join(dataDir, 'effect-ledger.jsonl')
+const pinkBinds = existsSync(ledger)
+  ? readFileSync(ledger, 'utf8').trim().split('\n')
+      .filter(Boolean)
+      .map(line => JSON.parse(line))
+      .filter(entry => entry.resource?.id === 'dsh-tui-theme')
+  : []
+const runtime = app.get('tuiStatus')
+const snapshot = statusModule.getHostStatusStore(runtime)?.getSnapshot()
+
+assert.ok(pinkBinds.length > 0, 'plugin must bind through the late status service')
+assert.ok(
+  snapshot?.some?.(entry => entry.key === 'dsh-tui-theme'),
+  'status store must contain the plugin contribution',
+)
+console.log(`✓ headless order: ${pinkBinds.length} ledger bind(s), visible status contribution`)

package/scripts/validate-themes-against-host.mjs

@@ -0,0 +1,115 @@
+/**
+ * Validate bundled themes against the real dsh-TUI source implementation.
+ * DSH_TUI_SOURCE_ROOT must point at a dsh-TUI source checkout.
+ *
+ * Run with: npx -y tsx scripts/validate-themes-against-host.mjs
+ */
+import { existsSync, mkdtempSync, readFileSync, readdirSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join, resolve } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
+import assert from 'node:assert/strict'
+
+const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
+const sourceRoot = process.env.DSH_TUI_SOURCE_ROOT
+if (sourceRoot === undefined || sourceRoot === '') {
+  throw new Error('DSH_TUI_SOURCE_ROOT must point at a dsh-TUI source checkout for this host theme validation.')
+}
+const hostRoot = resolve(sourceRoot)
+const customThemePath = join(hostRoot, 'src', 'customTheme.ts')
+const themePath = join(hostRoot, 'src', 'theme.ts')
+
+if (!existsSync(customThemePath) || !existsSync(themePath)) {
+  throw new Error(`dsh-TUI sources not found at ${hostRoot}`)
+}
+
+const hostPackagePath = join(hostRoot, 'package.json')
+if (!existsSync(hostPackagePath)) {
+  throw new Error(`dsh-TUI package metadata not found at ${hostPackagePath}`)
+}
+const hostPackage = JSON.parse(readFileSync(hostPackagePath, 'utf8'))
+assert.equal(hostPackage.version, '0.9.2', `expected dsh-TUI source 0.9.2, received ${hostPackage.version}`)
+
+const sandboxHome = mkdtempSync(join(tmpdir(), 'pink-theme-host-validate-'))
+process.env.USERPROFILE = sandboxHome
+process.env.HOME = sandboxHome
+
+const themesDir = join(pluginRoot, 'themes')
+const { parseCustomTheme, buildTheme } = await import(pathToFileURL(customThemePath).href)
+const { getTheme, isLightThemeActive, registerCustomThemeResolver } = await import(
+  pathToFileURL(themePath).href
+)
+
+const allKeys = Object.keys(getTheme('dark'))
+assert.ok(allKeys.length >= 90, 'host Theme key count drifted; re-check coverage')
+
+function parseColor(value) {
+  if (/^#[0-9A-Fa-f]{6}$/.test(value)) {
+    const n = Number.parseInt(value.slice(1), 16)
+    return [(n >> 16) & 255, (n >> 8) & 255, n & 255]
+  }
+  const match = /^rgb\((\d+),(\d+),(\d+)\)$/.exec(value)
+  return match === null ? undefined : [Number(match[1]), Number(match[2]), Number(match[3])]
+}
+
+function luminance(color) {
+  const channel = value => {
+    const normalized = value / 255
+    return normalized <= 0.03928
+      ? normalized / 12.92
+      : ((normalized + 0.055) / 1.055) ** 2.4
+  }
+  return 0.2126 * channel(color[0]) + 0.7152 * channel(color[1]) + 0.0722 * channel(color[2])
+}
+
+function contrast(foreground, background) {
+  const [high, low] = [luminance(foreground), luminance(background)].sort((a, b) => b - a)
+  return (high + 0.05) / (low + 0.05)
+}
+
+const expectedLight = { 'pink-night': false, 'pink-day': true, 'pink-ansi': false }
+const built = {}
+registerCustomThemeResolver(name => built[name])
+
+for (const file of readdirSync(themesDir).filter(name => name.endsWith('.json'))) {
+  const warnings = []
+  const originalWarn = console.warn
+  console.warn = message => warnings.push(String(message))
+  let spec
+  try {
+    spec = parseCustomTheme(readFileSync(join(themesDir, file), 'utf8'), file)
+  } finally {
+    console.warn = originalWarn
+  }
+
+  assert.notEqual(spec, undefined, `${file} must parse`)
+  assert.deepEqual(warnings, [], `${file} must produce zero host warnings`)
+  const missing = allKeys.filter(key => key !== 'userMessageBackground' && !(key in spec.colors))
+  assert.deepEqual(missing, [], `${file} must cover every Theme key`)
+
+  const theme = buildTheme(spec)
+  built[spec.name] = theme
+  assert.equal(isLightThemeActive(spec.name), expectedLight[spec.name], `${spec.name} identity`)
+}
+
+for (const [name, light] of Object.entries(expectedLight)) {
+  assert.equal(isLightThemeActive(name), light, `${name} identity via resolver`)
+}
+
+const cases = [
+  ['pink-night', 'text', '#1E1E1E', 4.5],
+  ['pink-night', 'claude', '#1E1E1E', 3.0],
+  ['pink-night', 'inactive', '#1E1E1E', 2.5],
+  ['pink-day', 'text', '#F6F3ED', 4.5],
+  ['pink-day', 'claude', '#F6F3ED', 3.0],
+  ['pink-day', 'inactive', '#F6F3ED', 2.5],
+]
+for (const [theme, key, background, minimum] of cases) {
+  const foregroundRgb = parseColor(built[theme][key])
+  const backgroundRgb = parseColor(background)
+  assert.notEqual(foregroundRgb, undefined, `${theme}.${key} must be parseable`)
+  const ratio = contrast(foregroundRgb, backgroundRgb)
+  assert.ok(ratio >= minimum, `${theme}.${key} contrast ${ratio.toFixed(2)} >= ${minimum}`)
+}
+
+console.log(`✓ host theme validation: ${Object.keys(built).length} themes, ${allKeys.length - 1} keys each`)

package/scripts/verify-package.mjs

@@ -0,0 +1,79 @@
+/**
+ * Release artifact contract: inspect npm's dry-run manifest without creating
+ * a tarball, then ensure consumers receive every advertised runtime asset.
+ */
+import { execFileSync } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import assert from 'node:assert/strict'
+
+const pluginRoot = fileURLToPath(new URL('..', import.meta.url))
+const packageJson = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'))
+const lockfile = JSON.parse(readFileSync(new URL('../package-lock.json', import.meta.url), 'utf8'))
+const packCommand = process.platform === 'win32'
+  ? { file: 'cmd.exe', args: ['/d', '/s', '/c', 'npm pack --dry-run --json --ignore-scripts'] }
+  : { file: 'npm', args: ['pack', '--dry-run', '--json', '--ignore-scripts'] }
+const manifest = JSON.parse(execFileSync(packCommand.file, packCommand.args, {
+  cwd: pluginRoot,
+  encoding: 'utf8',
+}))
+const packed = manifest[0]
+assert.ok(packed, 'npm pack must report one package')
+assert.equal(packed.name, 'dsh-tui-theme')
+assert.equal(packed.version, packageJson.version)
+
+const files = new Set(packed.files.map(entry => entry.path))
+for (const required of [
+  'package.json',
+  'README.md',
+  'LICENSE',
+  'cordis.patch.yml',
+  'lib/types/index.js',
+  'lib/types/index.d.ts',
+  'lib/types/autoTheme.js',
+  'lib/types/autoTheme.d.ts',
+  'lib/types/settingsSection.js',
+  'lib/types/settingsSection.d.ts',
+  'lib/types/statusLine.js',
+  'lib/types/statusLine.d.ts',
+  'lib/types/themeAssets.js',
+  'lib/types/themeAssets.d.ts',
+  'themes/pink-night.json',
+  'themes/pink-day.json',
+  'themes/pink-ansi.json',
+  'docs/screenshots/pink-day.png',
+  'docs/screenshots/pink-night.png',
+  'docs/screenshots/settings.png',
+  'scripts/verify.mjs',
+  'scripts/verify-package.mjs',
+  'scripts/headless-order-test.mjs',
+  'scripts/validate-themes-against-host.mjs',
+]) {
+  assert.ok(files.has(required), `published package must include ${required}`)
+}
+
+const exportedPaths = [packageJson.main, packageJson.types, packageJson.dsh.bundle.patch]
+for (const entry of Object.values(packageJson.exports)) {
+  if (typeof entry === 'string') exportedPaths.push(entry)
+  else if (entry !== null && typeof entry === 'object') exportedPaths.push(...Object.values(entry))
+}
+for (const entry of exportedPaths) {
+  assert.equal(typeof entry, 'string')
+  assert.ok(files.has(entry.replace(/^\.\//, '')), `published package must include declared entry ${entry}`)
+}
+
+for (const name of Object.keys(packageJson.peerDependencies)) {
+  if (!name.startsWith('@deepseek-ai/')) continue
+  assert.equal(packageJson.dependencies?.[name], undefined, `${name} must not be a runtime dependency`)
+  assert.equal(packageJson.devDependencies?.[name], packageJson.peerDependencies[name], `${name} peer and dev ranges must match`)
+}
+assert.equal(packageJson.dependencies?.['@deepseek-ai/schemastery'], undefined)
+const rootLock = lockfile.packages?.['']
+assert.ok(rootLock, 'lockfile must have root metadata')
+assert.equal(lockfile.version, packageJson.version)
+assert.deepEqual(rootLock.devDependencies, packageJson.devDependencies)
+assert.deepEqual(rootLock.peerDependencies, packageJson.peerDependencies)
+assert.equal(rootLock.dependencies, undefined)
+assert.equal(existsSync(new URL('../lib/types/index.js', import.meta.url)), true)
+
+console.log(`✓ package manifest: ${packed.name}@${packed.version}, ${files.size} files`)